JP2018514030A5 - - Google Patents

Claims (11)

A method for verifying a user's security credentials on a computing device, comprising:
Creating a user account on the server that includes a userID value and a full security string, wherein the full security string begins with a first character;
after that,
Providing the userID to the server;
Receiving a character count value associated with the userID from the server, wherein the character count value corresponds to a password strength based on a current context of the computing device;
Receiving input from a user, wherein the input consists of a subset of consecutive characters in the full security string starting with the first character;
Providing the input to the server when the number of characters in the input is equal to the character count value;
Accessing the user account. A method for validating an access request received from a client, comprising:
Receiving user identification information and a full security string from a user, the full security string starting with a first character;
Generating a plurality of substrings, each of the plurality of substrings comprising a subset of consecutive characters in the full security string beginning with the first character, wherein each of the plurality of substrings Is associated with a password strength value and a character count value, and
Receiving the access request from the client, wherein the access request includes the user identification information;
Determining one of the plurality of substrings based at least in part on the user identity and the current context of the client;
Providing the client with the character count value associated with the one of the plurality of substrings;
Receiving an input substring from the client, wherein a length of the input substring corresponds to the character count value;
Validating the input substring;
Granting the access request if the input substring is valid;
Rejecting the access request if the input substring is invalid.   The method of claim 2, wherein the current context includes a current location of the client.   The method of claim 2, wherein the current context includes a time when the access request was received.   The method of claim 2, wherein validating the input substring comprises determining a substring hash code for the input substring. Determining a salt value based at least in part on the user identification information;
6. The step of combining the input substring with the salt value, wherein the substring hash code is determined for the combination of the input substring and the salt value. the method of. Memory,
Operably coupled to the memory;
Creating a user account on the server that includes a userID value and a full security string, wherein the full security string begins with a first character;
Receiving a character count value from the server after providing the userID value, wherein the character count value corresponds to a required password strength;
Accessing the user account by providing a substring of length equal to the userID value and the character count value, wherein the substring in the full security string begins with the first character And at least one processor configured to access, including a subset of consecutive characters. The at least one processor is:
Determining context information about the device, wherein the required password strength is based at least in part on the context information;
8. The apparatus of claim 7 , configured to access the user account by providing the context information, the userID value, and the substring. The apparatus of claim 8 , wherein the at least one processor is configured to receive the character count value from the server after providing the userID value and the context information. The apparatus of claim 8 , wherein the context information includes a current location of the apparatus. The apparatus of claim 8 , wherein the context information includes a current time.